Privacy Policy

1. Data controller

The controller for personal data processing carried out on the idee-web.eu website is LFL Paris, a simplified joint-stock company with capital of €10,000, registered in the Versailles Trade and Companies Register under number 837 843 556, whose registered office is located at 5 rue du chant des oiseaux, 78360 Montesson, France.

IDEE-WEB is the commercial name of LFL Paris. You can contact us via the contact form or by mail at the registered office address indicated above.

2. Data collected and purposes

We only collect data strictly necessary for the purposes described below.

2.1 Contact form and quote requests

When you contact us via the site form or by email, we may process the following data:

• first and last name or company name;
• email address;
• phone number (if you provide it);
• content of your message or request.

Purpose: to respond to your contact or quote request and manage any resulting business relationship.

Legal basis: performance of pre-contractual measures (contact) and legitimate interest of LFL Paris in processing requests received via its website.

2.2 Browsing the website and audience measurement

The idee-web.eu website is hosted in France (OVH SAS). Technical logs (truncated IP address, timestamp, pages viewed) may be generated by the host for security and proper operation of the service. In addition, we use a self-hosted audience measurement tool, Umami, configured to produce anonymised statistics on site traffic (pages viewed, country, device type, source of the visit).

Purpose: to know, in an aggregated way, the audience of the site in order to improve its content and ergonomics.

Legal basis: your consent, collected via the preference management banner displayed during your first visit. In the absence of consent or in case of refusal, no audience measurement via Umami is carried out.

2.3 Anti-spam protection for forms (Cap)

When you use the public forms on the site (contact, appointment booking, web pre-diagnosis), an anti-spam protection mechanism is activated when you submit the form. It relies on Cap, a proof-of-work solution, deployed in a self-hosted manner on our infrastructure in France.

Purpose: to limit automated submissions (spam) and ensure the reliability of forms.

Legal basis: legitimate interest of LFL Paris in securing its online services; the data you enter in the form is already provided voluntarily in this context.

This mechanism does not use advertising cookies or profiling for marketing purposes. No data is shared with third-party advertising networks.

2.4 Online appointment booking

When you book a slot via the appointment module, we process the data required for scheduling (identity, contact details, chosen slot, meeting type if applicable). For video appointments, Jitsi may be used; it is deployed in a self-hosted manner on our infrastructure in France. Data exchanged during the session is limited to what is technically necessary.

Purpose: organise and hold the requested appointment.

Legal basis: performance of pre-contractual measures and consent for optional data; legitimate interest in securing the service.

2.5 Web pre-diagnosis

The pre-diagnosis form collects information about your website (URL, CMS, technical constraints) and your contact details to prepare a personalised exchange.

Purpose: analyse your request and provide a tailored recommendation.

Legal basis: consent (dedicated checkbox) and performance of pre-contractual measures.

2.6 AI crawlers and indexing

Exploration robots (crawlers) may access public site content in accordance with the robots.txt file and the llms.txt file published on idee-web.eu. Our citation and AI use policy is described in these resources and may evolve; the version in force is the one published on the site.

Purpose: control content visibility in search engines and digital assistants.

Legal basis: legitimate interest in managing the distribution of public content.

3. Retention period

Data from contact forms and email exchanges are kept for the time necessary to process your request, then for the duration of any business relationship. Beyond that, they may be kept for three years from the last contact for evidence and complaint management purposes, unless a longer retention period is required by law.

4. Data recipients

Personal data you provide to us is processed by authorized personnel at LFL Paris. It may be shared with our technical subcontractors (website host, email delivery provider if applicable) strictly within the scope of their tasks and in compliance with the GDPR. We do not sell or rent your data to third parties.

5. Transfers outside the European Union

In our current operations, data processed via the idee-web.eu website is hosted and processed in France. In the event of any future transfer to a country outside the European Union, we undertake to put in place appropriate safeguards (standard contractual clauses, adequacy decision, etc.) and to inform you accordingly.

6. Your rights

In accordance with the General Data Protection Regulation (GDPR) and applicable data protection law, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that data concerning you is being processed and receive a copy;
• Right to rectification: have inaccurate or incomplete data corrected;
• Right to erasure: request deletion of your data within the limits provided by law;
• Right to restriction of processing: request that processing be restricted under certain conditions;
• Right to object: object to processing based on legitimate interest;
• Right to data portability: receive your data in a structured, commonly used format when processing is based on consent or contract performance.

To exercise these rights, contact us via the contact form or by mail at: LFL Paris, 5 rue du chant des oiseaux, 78360 Montesson. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Commission nationale de l'informatique et des libertés (CNIL), 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or at www.cnil.fr.

7. Cookies and trackers

On your first visit, your choice regarding audience measurement may be stored in your browser using localStorage (key iw-consent), so that your acceptance or refusal is remembered without asking you again on every page.

Umami may use a technical identifier to distinguish repeat visits to the site. This identifier is limited to audience measurement, is not combined with other data sources and is not used for advertising purposes. No behavioural advertising or retargeting solution is deployed on idee-web.eu.

The placement and reading of this audience measurement tracker are carried out only with your consent, collected via the preference management banner. You can change your choice at any time using the Manage cookie preferences link in the footer, by clearing data stored in your browser (localStorage/cookies) or via your browser settings.

For anti-spam protection on public forms, Cap may trigger a technical proof-of-work verification when you submit a form. This processing is limited to combating automated submissions, is not used to track your browsing and does not rely on advertising cookies.

8. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, destruction or alteration, in compliance with GDPR requirements.

9. Modifications

This privacy policy may be modified to reflect changes in our practices or regulations. The version in force is the one published on this page. We invite you to consult it regularly.